Firewall Precedence

[mwindower]

Closes #97

Idea: Prolong AS-Path in all directions (except the underlay)

• for IPs of external networks produced in a cluster
• for routes to storage
• for the default routes / internet access of the cluster

[Honigeintopf]

I will add the distance to the InstallerConfig in metal hammer, this is used as config to be input from fc to metal-networker.
That way we can also test it better.

https://github.com/metal-stack/metal-hammer/blob/eaceba8987b759f21449ec965c1758da17c5a75a/pkg/api/api.go#L16C1-L43C2

Otherwise I have to manually input the distance from fc to metal-networker and testing it is also not as good that way.

fwDistance := uint8(f.Distance)
a := netconf.NewFrrConfigApplier(netconf.Firewall, *c, tmpFile, fwDistance)

what do you think? @majst01

[majst01]

I will add the distance to the InstallerConfig in metal hammer, this is used as config to be input from fc to metal-networker. That way we can also test it better.

https://github.com/metal-stack/metal-hammer/blob/eaceba8987b759f21449ec965c1758da17c5a75a/pkg/api/api.go#L16C1-L43C2

Otherwise I have to manually input the distance from fc to metal-networker and testing it is also not as good that way.

fwDistance := uint8(f.Distance)
a := netconf.NewFrrConfigApplier(netconf.Firewall, *c, tmpFile, fwDistance)

what do you think? @majst01

This will not help, it must be done in the firewall controller

[Honigeintopf]

I will add the distance to the InstallerConfig in metal hammer, this is used as config to be input from fc to metal-networker. That way we can also test it better.
https://github.com/metal-stack/metal-hammer/blob/eaceba8987b759f21449ec965c1758da17c5a75a/pkg/api/api.go#L16C1-L43C2
Otherwise I have to manually input the distance from fc to metal-networker and testing it is also not as good that way.

fwDistance := uint8(f.Distance)
a := netconf.NewFrrConfigApplier(netconf.Firewall, *c, tmpFile, fwDistance)

what do you think? @majst01

This will not help, it must be done in the firewall controller

Sorry wrong issue. This is about the firewall-controller function.